v4.30.0

FEATURES:

• New Data Source: google_service_account_jwt (#4489)
• New Resource: google_certificate_map_entry (#4501)
• New Resource: google_certificate_map (#4501)
• New Resource: google_compute_backend_bucket_iam_binding (#4484)
• New Resource: google_compute_backend_bucket_iam_member (#4484)
• New Resource: google_compute_backend_bucket_iam_policy (#4484)
• New Resource: google_dataproc_metastore_federation (#4482)
• New Resource: google_dataproc_metastore_federation_iam_binding (#4482)
• New Resource: google_dataproc_metastore_federation_iam_member (#4482)
• New Resource: google_dataproc_metastore_federation_iam_policy (#4482)

IMPROVEMENTS:

• billingbudget: made thresholdRules optional in google_billing_budget (#4480)
• compute: added instance_termination_action field to google_compute_instance_template resource to support Spot VM termination action (#4488)
• compute: added instance_termination_action field to google_compute_instance resource to support Spot VM termination action (#4488)
• compute: added request_coalescing and bypass_cache_on_request_headers fields to compute_backend_bucket (#4484)
• compute: added field all_instances_config to google_compute_instance_group_manager and google_compute_region_instance_group_manager (#4506)
• compute: added support for esp protocol in google_compute_packet_mirroring.filters.ip_protocols (#4496)
• monitoring: added evaluation_missing_data field to google_monitoring_alert_policy (#4502)
• notebooks: added field reserved_ip_range to google_notebooks_runtime (#4492)

BUG FIXES:

• bigtable: fixed an incorrect diff when adding two or more clusters (#4490)
• compute: allowed properly updating adaptive_protection_config in compute_security_policy (#4478)
• notebooks: fixed a bug wheregoogle_notebooks_runtime can't be updated (#4492)
• sql: fixed an issue in google_sql_database_instance where updates would fail because of the collation field (#4505)

v4.29.0

FEATURES:

• New Resource: google_cloudiot_registry_iam_binding (#4452)
• New Resource: google_cloudiot_registry_iam_member (#4452)
• New Resource: google_cloudiot_registry_iam_policy (#4452)
• New Resource: google_compute_snapshot_iam_binding (#4445)
• New Resource: google_compute_snapshot_iam_member (#4445)
• New Resource: google_compute_snapshot_iam_policy (#4445)

IMPROVEMENTS:

• container: added binauthz_evaluation_mode field to resource_container_cluster. (#4451)
• kms: added support for MAC value in google_kms_crypto_key.purpose (#4458)
• metastore: added databaseType, releaseChannel, and hiveMetastoreConfig.endpointProtocol arguments (#4443)

BUG FIXES:

• bigquery: fixed case-sensitivity for user_by_email and group_by_email on google_bigquery_dataset_access (#4446)
• clouddeploy: fixed permadiff on execution_configs in google_clouddeploy_target resource (#4450)
• cloudscheduler: fixed a diff on the last slash of uri on google_cloud_scheduler_job (#4444)
• compute: fixed force recreation on provisioned_iops of google_compute_disk (#4464)
• compute: fixed missing network_interface.0.ipv6_access_config.0.external_ipv6 output on google_compute_instance (#4470)
• documentai: fixed a bug where eu region could not be utilized for documentai resources (#4472)
• gkehub: fixed a bug where issuer can't be updated on google_gke_hub_membership (#4471)

v4.28.0

4.28.0 (July 11, 2022)

FEATURES:

• New Resource: google_bigquery_connection_iam_binding (#4437)
• New Resource: google_bigquery_connection_iam_member (#4437)
• New Resource: google_bigquery_connection_iam_policy (#4437)
• New Resource: google_cloud_tasks_queue_iam_binding (#4427)
• New Resource: google_cloud_tasks_queue_iam_member (#4427)
• New Resource: google_cloud_tasks_queue_iam_policy (#4427)
• New Resource: google_dataproc_autoscaling_policy_iam_binding (#4441)
• New Resource: google_dataproc_autoscaling_policy_iam_member (#4441)
• New Resource: google_dataproc_autoscaling_policy_iam_policy (#4441)
• New Resource: google_dataproc_metastore_service_iam_binding (#4416)
• New Resource: google_dataproc_metastore_service_iam_member (#4416)
• New Resource: google_dataproc_metastore_service_iam_policy (#4416)

IMPROVEMENTS:

• bigquery: fixed a permadiff in google_bigquery_job.query. destination_table (#4401)
• billing: added calendar_period and custom_period fields to google_billing_budget (#4429)
• cloudsql: added attribute project to data source google_sql_backup_run (#4402)
• composer: added CMEK, PUPI and IP_masq_agent support for Composer 2 in google_composer_environment resource (#4430)
• compute: added max_ports_per_vm field to google_compute_router_nat resource (#4400)
• compute: added GCE_VM_IP support to google_compute_network_endpoint_group resource. (#4434)
• privateca: added support to subordinate CA activation (#4422)
• redis: added CMEK key field customer_managed_key in google_redis_instance (#4435)
• spanner: added field version_retention_period to google_spanner_database resource (#4424)
• sql: added settings.location_preference.secondary_zone field in google_sql_database_instance (#4433)
• sql: added sql_server_audit_config field in google_sql_database_instance (#4403)

BUG FIXES:

• composer: fixed a problem with updating Cloud Composer's scheduler_count field (hashicorp/terraform-provider-google#11940) (#4408)
• composer: fixed permadiff on private_environment_config.cloud_composer_connection_subnetwork (#4411)
• container: fixed an issue where node_config.min_cpu_platform could cause a perma-diff in google_container_cluster (#4426)
• filestore: fixed a case where google_filestore_instance.networks.network would incorrectly see a diff between state and config when the network id format was used (#4431)
• serviceusage: fixed an issue where google_project_service_identity didn't handle service identities without emails correctly (#4432)

v4.27.0

IMPROVEMENTS:

• clouddeploy: added suspend field to google_clouddeploy_delivery_pipeline resource (#4394)
• compute: added maxPortsPerVm field to google_compute_router_nat resource (#4400)
• compute: added psc_connection_id and psc_connection_status output fields to google_compute_forwarding_rule and google_compute_global_forwarding_rule resources (#4392)
• container: added tpu_config to google_container_cluster (beta only) (#4390)
• containeraws: made config.instance_type field updatable in google_container_aws_node_pool (#4392)

BUG FIXES:

• compute: fixed default handling for enable_dynamic_port_allocation to be managed by the api (#4391)
• vertexai: Fixed a bug where terraform crashes when force_destroy is set in google_vertex_ai_featurestore resource (#4398)

v4.26.0

FEATURES:

• New Resource: google_cloudfunctions2_function_iam_binding (#4377)
• New Resource: google_cloudfunctions2_function_iam_member (#4377)
• New Resource: google_cloudfunctions2_function_iam_policy (#4377)
• New Resource: google_compute_region_ssl_policy (#4376)
• New Resource: google_documentai_processor (#4389)
• New Resource: google_documentai_processor_default_version (#4389)

IMPROVEMENTS:

• accesscontextmanager: Added external_resources to egress_to in google_access_context_manager_service_perimeter and google_access_context_manager_service_perimeters resource (#4378)
• apigateway: Added grpc_services and managed_service_configs to google_api_gateway_api_config (#4388)
• cloudbuild: Added include_build_logs to google_cloudbuild_trigger (#4380)
• compute: Added ssl_policy field to google_compute_region_target_https_proxy (#4376)
• container: Added managed_prometheus to monitoring_config in google_container_cluster (#4373)
• container: Added tpu_config to google_container_cluster (#4390)

BUG FIXES:

• dns: Fixed a bug where google_dns_record_set resource can not be changed from default routing to Geo routing policy. (#4383)
• sql: Fixed a bug where google_sql_database_instance would fail if a replica was created, with an encryption key, in a different region than the master instance. (#4379)

v4.25.0

IMPROVEMENTS:

• bigquery: added connection_id to external_data_configuration for google_bigquery_table (#4365)
• cloudfunctions2: added support for configuring service_account_email to google_cloudfunctions2_function resource (#4367)
• compute: added advanced_options_config to google_compute_security_policy (#4354)
• compute: added cache_key_policy field to google_compute_backend_bucket resource (#4349)
• compute: added include_named_cookies to cdn_policy on compute_backend_service resource (#4358)
• compute: added internal IPv6 support on google_compute_network and google_compute_subnetwork (#4368)
• container: added managed_prometheus to monitoring_config in google_container_cluster (#4373)
• container: added spot field to node_config sub-resource (#4350)
• gkehub: added prevent_drift field to google_gke_hub_feature_membership resource (#4370)
• monitoring: added support for JSONPath content matchers to google_monitoring_uptime_check_config resource (#4361)
• monitoring: added support for user_labels to google_monitoring_slo resource (#4363)
• sql: added sql_server_user_details field to google_sql_user resource (#4364)

BUG FIXES:

• certificatemanager: fixed bug where DEFAULT scope would permadiff and force replace the certificate. (#4356)
• dns: fixed perma-diff for updated labels in google_dns_managed_zone (#4372)
• storagetransfer: fixed perm diff on transfer_options for google_storage_transfer_job (#4357)

v4.24.0

IMPROVEMENTS:

• compute: added cache_key_policy field to google_compute_backend_bucket resource (#4349)

v4.23.0

FEATURES:

• New Data Source: google_tags_tag_key (#4337)
• New Data Source: google_tags_tag_value (#4337)
• New Resource: google_dataplex_lake (#4341)

IMPROVEMENTS:

• bigqueryconnection: updated connection types to support v1 ga (#4323)
• cloudfunctions: added docker registry support for Cloud Functions (#4324)
• memcache: added maintenance_policy and maintenance_schedule to google_memcache_instance (#4338)
• service-directory: marked network field immutable in google_service_directory_endpoint (#4334)

BUG FIXES:

• binaryauthorization: fixed permadiff in google_binary_authorization_attestor (#4325)
• service: added re-polling for service account after creation, 404s sometimes due to eventual consistency (#4333)

v4.22.0

NOTE: Due to technical difficulties encountered in the release process, the 4.22.0 release for google-beta occurred several hours after the corresponding google provider release.

FEATURES:

• New Resource: google_certificate_manager_certificate (#4301)
• New Resource: google_certificate_manager_dns_authorization (#4301)
• New Resource: google_clouddeploy_delivery_pipeline (#4288)
• New Resource: google_clouddeploy_target (#4288)

IMPROVEMENTS:

• bigquery: added connection of type cloud_resource for google_bigquery_connection (#4312)
• cloudfunctions: added https_trigger_security_level to google_cloudfunctions_function (#4295)
• cloudrun: added traffic.tag and traffic.url fields to google_cloud_run_service (#4283)
• compute: added enable_dynamic_port_allocation to google_compute_router_nat (#4316)
• compute: added field update_policy.most_disruptive_allowed_action to google_compute_instance_group_manager and google_compute_region_instance_group_manager (#4282)
• compute: added support for NEG type PRIVATE_SERVICE_CONNECT in NetworkEndpointGroup (#4303)
• compute: added support for domain_names attribute in google_compute_service_attachment (#4313)
• compute: added value REFRESH to field update_policy.minimal_actioningoogle_compute_instance_group_managerandgoogle_compute_region_instance_group_manager` (#4282)
• container: added field exclusion_options to google_container_cluster (#4291)
• monitoring: added checker_type field to google_monitoring_uptime_check_config resource (#4302)
• privateca: add a new field desired_state to manage CertificateAuthority state. (#4279)
• sql: added active_directory_config field in google_sql_database_instance (#4298)
• sql: removed requirement that Cloud SQL Insight is only allowed for Postgres in google_sql_database_instance (#4310)

BUG FIXES:

• cloudfunctions: fixed an issue where google_cloudfunctions2_function would not update (#4278)
• compute: fixed extra diffs generated on google_security_policy rules when modifying a rule (#4287)
• container: fixed Autopilot cluster couldn't omit master ipv4 cidr in google_container_cluster (#4280)
• resourcemanager: fixed a bug in wrongly writing to state when creation failed on google_project_organization_policy (#4297)
• storage: not specifying content or source for google_storage_bucket_object now fails at plan-time instead of apply-time. (#4292)

v4.21.0

IMPROVEMENTS:

• cloudfunctions: added CMEK support for Cloud Functions (#4272)
• compute: added service_directory_registrations to google_compute_forwarding_rule resource (#4276)
• compute: removed validation checking against a fixed set of persistent disk types (#4273)
• container: removed validation checking against a fixed set of persistent disk types (#4273)
• containeraws: added image_type and instance_placement to google_container_aws_node_pool resource (#4276)
• containeraws: added instance_placement and logging_config to google_container_aws_cluster resource (#4276)
• containeraws: added proxy_config to google_container_aws_node_pool resource (#4276)
• containerazure: added image_type to google_container_azure_node_pool resource (#4276)
• containerazure: added logging_config to google_container_azure_cluster resource (#4276)
• containerazure: added proxy_config to google_container_azure_node_pool resource (#4276)
• dataproc: removed validation checking against a fixed set of persistent disk types (#4273)
• dns: added routing_policy to google_dns_record_set resource (#4265)

BUG FIXES:

• cloudfunctions: fixed an issue where google_cloudfunctions2_function would not update (#4278)
• compute: fixed a crash in google_compute_instance when the instance is deleted outside of Terraform (#4262)
• provider: removed printing credentials to the console if malformed JSON is given (#4266)